Privacy policy
Data controller
The data controller is Infinitum 69 EOOD, EIK 202430305, VAT No. BG202430305, with registered office and address at Sofia, Serdika residential district, bl. 1. Contact person: Ивайло Костадинов. You can contact us at infinitum69@abv.bg or 089 796 2719.
What data we process and why
When you place an order, we process your full name, phone number, email address, country, city, postal code, address, additional address information and order note, where provided. We also retain details of the selected products, variants, quantities, prices, delivery, payment method and status, and order and payment identifiers. These data are necessary to receive, separately confirm by email, fulfil, deliver and support the order, handle complaints and disputes, and comply with applicable accounting, tax and other legal obligations.
For card payments, card details are entered directly with Stripe and are not stored in the store's database. The store processes the payment method, status and identifiers needed to track the order.
Enquiries and technical data
The contact form prepares an email in your email application and does not automatically send the message to the store's server. When you send the email, we receive the name, phone number and message you entered so that we can respond. The hosting provider may process request data, including an IP address, to deliver and protect the service and limit abuse.
Who has access to the data
Only where necessary to fulfil an order, the relevant data may be accessed by the operator preparing the goods, the person preparing the accompanying document, and the courier where delivery is made by courier. Access is limited to what each specific task requires; not every employee has access to all data.
Technical service providers
The site uses Netlify for hosting, PostgreSQL/Neon for the database, Cloudinary for images and Stripe for card payments. Resend processes the email address and order data only when the email confirmation service is enabled. These providers receive only the data required for their respective services. Google Maps loads only after consent is given; Google may then receive an IP address and technical data and use its own storage under its policy. Where applicable, relationships with providers and any international processing are governed by the relevant contractual and legal safeguards.
Translations are prepared locally using MADLAD-400 and published as finished text. Form data, delivery addresses and other customer personal data are not sent to an external translation service.
Retention
Data are retained long-term in a database for as long as necessary to fulfil and evidence orders, handle complaints and disputes, and comply with applicable accounting, tax and other legal obligations. When those purposes no longer apply and there is no other legal basis for retention, the data are deleted or anonymised. The system does not automatically delete data after a predetermined number of years.
Your rights
Under applicable law, you may request access, rectification, erasure, restriction of processing or data portability, and may object to processing. Where processing is based on consent, you may withdraw it without affecting the lawfulness of processing before withdrawal. To exercise a right, send a request to infinitum69@abv.bg or use the stated phone number; we may request information needed to verify your identity and connection to the order. You may lodge a complaint with the Bulgarian Commission for Personal Data Protection.